sdk
cosignet/sdkThin TypeScript + zero-dep Python client and recipes to gate high-risk actions behind a payload-bound passkey approval.
api-securityauthenticationauthentication-authorization+3
cosignet/sdkThin TypeScript + zero-dep Python client and recipes to gate high-risk actions behind a payload-bound passkey approval.
johanneslks/cve-2026-33186gRPC-Go RBAC Authorization Policy Bypass via Missing `:path` Slash (Auth Bypass)
mrcord77/rust_citadelPost-quantum hybrid encryption library combining X25519 + ML-KEM-768 with AES-256-GCM
kit-lang/packages/kit-oauthOAuth 2.0 client library for Kit applications supporting authorization code, PKCE, client credentials, and refresh token flows with built-in provider…
rajsidwadkar/uap-protocolA unified, security-first wire protocol for tool access and agent coordination. UAP eliminates CVE-2025-49596 and MCP tool-poisoning vulnerabilities…
ex-cal1bur/cve-2026-44595# CVE-2026-44595 YAMCS Unauthorized User Enumeration via IAM API
sudo-wp/sudowp-clickfunnels-zurichA security-patched fork of the legacy ClickFunnels Classic WordPress plugin. Fixes critical Stored XSS vulnerabilities (CVE-2022-4782) while…
oscerd/cve-2026-23552CVE-2026-23552 - Cross-Realm Token Acceptance in camel-keycloak
sudo-wp/sudowp-crowdsignal-formsA security-hardened fork of Crowdsignal Forms. Patches CVE-2025-69015 (Broken Access Control), modernizes for PHP 8.2+, and enforces strict…
shoucheng3/esapi__esapi-java-legacy_cve-2022-23457_2-2-3-1Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input validation,…
shoucheng3/esapi__esapi-java-legacy_cve-2022-24891_2-2-3-1OWASP Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input…
shoucheng3/springsource__spring-security-oauth_cve-2018-1260_2-3-2-releaseOAuth and OAuth2 support library for Spring Security, enabling secure API authentication and authorization for consumer and provider implementations…
shoucheng3/keycloak__keycloak_cve-2022-4361_21-1-1Open source identity and access management solution providing single sign-on, user federation, and centralized authentication for modern applications…
shoucheng3/asf__cxf_cve-2019-17573_3-2-11Web services framework for building and developing SOAP, RESTful, and CORBA services with support for WS-Security, WS-Trust, and JAX-WS/JAX-RS APIs.
shoucheng3/spring-cloud__spring-cloud-config_cve-2020-5410_2-1-8-releaseCentralized configuration server for distributed systems with HTTP API, Git-backed storage, property encryption/decryption, and integration with…
shoucheng3/keycloak__keycloak_cve-2014-3656_1-0-5-finalOpen-source identity and access management solution providing authentication, user federation, single sign-on, and fine-grained authorization for…
shoucheng3/apache__incubator-dubbo_cve-2021-30181_2-6-8High-performance Java RPC and microservices framework with service discovery, traffic management, observability, and built-in security for building…
shoucheng3/keycloak__keycloak_cve-2022-1274_20-0-3Open source identity and access management solution providing single sign-on, user federation, and centralized authentication for modern applications…